Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/isV1gSCyQYGUW35wdErYPxzVvdU.roa
File: isV1gSCyQYGUW35wdErYPxzVvdU.roa (raw, json)
Hash identifier: RwhHJ7HHiMAGyAa5SF31Xpla99PJuI3QMh6Ns+vE3W4=
Subject key identifier: 8A:C5:75:81:20:B2:41:81:94:5B:7E:70:74:4A:D8:3F:1C:D5:BD:D5
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 0C95B0FA
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/isV1gSCyQYGUW35wdErYPxzVvdU.roa
Signing time: Fri 22 Apr 2022 09:35:34 +0000
ROA not before: Fri 22 Apr 2022 09:35:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2593
IP address blocks: 95.140.128.0/21 maxlen: 21
185.213.113.0/24 maxlen: 24
2001:7f8:5f::/48 maxlen: 48
2a09:8d00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211136762 (0xc95b0fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Apr 22 09:35:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ac5758120b24181945b7e70744ad83f1cd5bdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:d3:5d:ff:bb:fa:0b:8b:8e:78:53:ea:70:
ec:c9:7e:11:72:47:ea:24:52:06:75:57:68:1b:2c:
86:08:7a:18:77:f0:75:74:70:cb:3a:04:1f:b7:d0:
de:b3:97:a6:11:f2:eb:98:f6:c8:6e:8f:4f:98:41:
0e:98:24:ad:e4:51:4c:bc:59:a5:a7:4f:8a:a8:18:
b9:05:5e:6d:4a:2b:de:bd:1c:9f:08:5e:a9:2c:fc:
f6:8b:08:17:15:06:4b:d3:7a:de:dd:52:9c:8d:26:
c4:30:d8:72:a7:bc:b0:56:39:fa:d5:fc:ce:28:a1:
60:4b:d6:56:c7:01:25:a6:fb:22:86:04:0e:4e:23:
b0:5c:d1:c1:02:74:95:fd:ea:14:f4:c8:d6:85:31:
86:4f:4b:1d:26:da:69:fc:71:7f:e3:c2:ea:b2:b9:
83:ea:d4:fc:47:75:ac:a1:5a:c9:37:60:5f:2a:ec:
e4:94:84:6a:2f:d2:75:af:f6:bd:4d:eb:be:48:15:
61:91:c3:fd:6c:3a:84:49:8f:eb:b9:50:f2:f8:12:
da:4f:8c:be:7a:01:b5:62:e5:37:b7:f2:97:cc:74:
76:5b:03:20:f1:bf:6a:61:5b:27:65:41:42:01:dc:
88:de:30:51:66:7b:9e:86:32:3b:4d:8b:7a:f0:e3:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C5:75:81:20:B2:41:81:94:5B:7E:70:74:4A:D8:3F:1C:D5:BD:D5
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/isV1gSCyQYGUW35wdErYPxzVvdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.128.0/21
185.213.113.0/24
IPv6:
2001:7f8:5f::/48
2a09:8d00::/29
Signature Algorithm: sha256WithRSAEncryption
2b:13:57:5a:ca:5f:ae:09:7c:05:45:46:00:14:f7:d5:88:73:
a8:91:c9:80:72:8f:b8:e3:f8:ea:0a:69:3e:c7:4c:fc:e5:23:
e3:c8:f8:39:93:25:e0:9b:a4:3c:e3:07:6b:e3:3f:4d:b5:51:
7b:89:c5:ed:7d:db:3e:58:98:ab:31:00:e1:98:37:34:a1:93:
5a:09:0a:f8:a6:b3:22:04:e0:ef:1c:c7:28:0d:b8:69:38:23:
de:50:29:40:f3:87:19:34:41:3b:5d:aa:d1:fc:11:7c:2f:ef:
f9:9b:08:3f:47:dc:f8:c4:6a:8b:33:ec:92:41:cf:16:3f:52:
d9:18:d3:72:81:54:5a:19:5f:a7:b9:d0:6d:9f:9f:a5:77:83:
dd:00:7d:97:54:09:95:30:1d:c3:c9:2c:b4:ab:fb:d1:8a:27:
a8:99:79:3d:ef:01:8e:ab:50:55:4e:ef:34:f5:3d:7f:bc:df:
d1:11:8c:2c:fe:5b:82:1c:da:ca:43:03:74:5f:d4:54:85:64:
cf:7b:79:91:83:07:24:1a:9a:a7:61:71:ef:a4:57:14:08:f3:
33:46:48:f8:f0:d6:02:9f:fb:88:bd:db:6c:25:df:91:d7:5f:
c1:88:39:bb:7d:37:c4:33:c2:49:d9:20:d1:c1:57:03:be:8c:
1e:ec:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:06 2025 by rpki-client